train-sentence-transformers
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- Remote Resource Retrieval: The skill includes instructions to download a command-line interface from an official domain (
hf.co) and several Python packages from public registries. These are standard components for establishing the necessary environment for model training. - Data Processing Surface: The training workflow involves ingesting text data from external sources to optimize models.
- Ingestion points: Text content from datasets like MS MARCO or GooAQ is loaded into the agent's context during the training process in files like
scripts/train_cross_encoder_example.py. - Boundary markers: The instructions do not define explicit delimiters to separate dataset content from training logic.
- Capability inventory: The skill includes the ability to write model weights to the local disk and perform network operations to upload checkpoints to external repositories.
- Sanitization: External text data is processed directly for model training purposes without specialized filtering for instructions.
- Secure Credential Management: The skill provides a framework for using environment-level secrets to handle authentication tokens for remote jobs, as seen in
references/hf_jobs_execution.md, ensuring that credentials are not hardcoded within scripts. - Model Distribution: The included scripts provide automated routines for uploading training results to external repositories, which is a common functional requirement for sharing and deploying machine learning models.
Audit Metadata